IBM Product Security Update Advisory (CVE-2025-36245)

Overview

 

We have released a security update to fix vulnerabilities in IBM products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-36245

 

IBM InfoSphere Information Server Versions: 11.7.0.0 and later and 11.7.1.6 and earlier

 

 

Resolved Vulnerabilities

 

Memory corruption vulnerability in Firefox (CVE-2025-49709)
Integer overflow vulnerability in the handling of HashTables used by the JavaScript engine in Firefox (CVE-2025-49710)

 

 

Vulnerability Patches

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-36245

 

IBM InfoSphere Information Server Version: 11.7.1.6 Service pack 1 [2]

*see Referenced Sites [1]

 

 

Reference site

 

[1] Security Bulletin: IBM InfoSphere Information Server is vulnerable to execution of arbitrary commands (CVE-2025-36245)
https://www.ibm.com/support/pages/node/7246170
[2] Download IBM InfoSphere Information Server, Version 11.7.1.6 Service Pack 1
https://www.ibm.com/support/pages/node/7245759